Being picky, the elevated deferred custom actions in a per system install run with the system account. If you have code that needs to do something on behalf of the installing user (an example might be access/administer a database or go to the network or a user profile mapped drive) the system account can't do those things because it typically has no network or database privilege and can't see network drives that belong to a user, not the system. The installing user can have the rights to do these things. I'm not saying that doing these things is always a good idea, but people do need them sometimes. Plus an impersonated custom action can be elevated if launched from an elevated process, and I suspect that some bundled installs such as SQL use that capability.
Phil Wilson On Tue, Dec 3, 2013 at 7:37 AM, Tony <yellowjacketl...@gmail.com> wrote: > Is there something in the logs that would indicate that an action is being > executed with/without this impersonate flag set? > > It is nice that we have the options, but why would I want Impersonate set > to 'yes'? Isn't the whole point of deferred actions to run with system > privileges? > > > On Tue, Dec 3, 2013 at 8:20 AM, Tony <yellowjacketl...@gmail.com> wrote: > > > Thanks. > > > > > > On Tue, Dec 3, 2013 at 8:03 AM, Blair Murri <os...@live.com> wrote: > > > >> msidbCustomActionTypeNoImpersonate in the Type column of the > CustomAction > >> table. > >> > >> http://msdn.microsoft.com/library/aa368069.aspx > >> > >> -Blair > >> > >> > Date: Tue, 3 Dec 2013 07:43:08 -0500 > >> > From: yellowjacketl...@gmail.com > >> > To: wix-users@lists.sourceforge.net > >> > Subject: Re: [WiX-users] Deferred <CustomAction Impersonate="y/n" /> > >> vs. elevation > >> > > >> > Thanks. > >> > > >> > What flag/option get set in Windows Installer tables when @Impersonate > >> is > >> > set to 'no'? > >> > > >> > > >> > On Mon, Dec 2, 2013 at 11:35 PM, Blair Murri <os...@live.com> wrote: > >> > > >> > > @Impersonate='yes' is the default, so you do need to "turn off > >> > > impersonation" by explicitly saying "no". > >> > > > >> > > -Blair > >> > > > >> > > > Date: Mon, 2 Dec 2013 15:32:58 -0500 > >> > > > From: yellowjacketl...@gmail.com > >> > > > To: wix-users@lists.sourceforge.net > >> > > > Subject: [WiX-users] Deferred <CustomAction Impersonate="y/n" /> > vs. > >> > > elevation > >> > > > > >> > > > I have a deferred custom action that is failing **UNLESS** I > launch > >> the > >> > > > install "Run as Administrator". Any ideas why this is happening? > >> > > > > >> > > > <Package InstallerVersion="500" InstallPrivileges="elevated" .../> > >> > > > > >> > > > <CustomAction Id="CustomInstall" Execute="deferred" Return="check" > >> > > > DllEntry="Install" BinaryKey="MyCustomActions" /> > >> > > > > >> > > > <InstallExecuteSequence> > >> > > > ... > >> > > > <Custom Action="CustomInstall" Before="InstallServices">NOT > >> > > > Installed</Custom> > >> > > > ... > >> > > > </InstallExecuteSequence> > >> > > > > >> > > > > >> > > > Do I need to add the 'Impersonate="no"' attribute to make this > work > >> (is > >> > > > _assume_ "yes" is the default)? > >> > > > > >> > > > >From the logs... > >> > > > > >> > > > ... > >> > > > MSI (c) (D4:60) [19:24:20:051]: Machine policy value 'DisableMsi' > >> is 1 > >> > > > MSI (c) (D4:60) [19:24:20:051]: Machine policy value > >> > > > 'AlwaysInstallElevated' is 0 > >> > > > MSI (c) (D4:60) [19:24:20:051]: User policy value > >> 'AlwaysInstallElevated' > >> > > > is 0 > >> > > > MSI (c) (D4:60) [19:24:20:051]: Running product > >> > > > '{BACFF966-3CEF-4CD7-BE12-D8F6D89D2BE3}' with user privileges. > >> DisableMsi > >> > > > policy is set to or defaulted to 1. This is the client and the > user > >> does > >> > > > not have full admin token. Evaulation is delayed until after > >> credentials > >> > > > provided. This install could still be blocked > >> > > > ... > >> > > > MSI (c) (D4:60) [19:24:20:067]: Note: 1: 2262 2: AdminProperties > 3: > >> > > > -2147287038 > >> > > > MSI (c) (D4:60) [19:24:20:067]: Machine policy value > >> > > > 'AlwaysInstallElevated' is 0 > >> > > > MSI (c) (D4:60) [19:24:20:067]: User policy value > >> 'AlwaysInstallElevated' > >> > > > is 0 > >> > > > MSI (c) (D4:60) [19:24:20:067]: Running product > >> > > > '{BACFF966-3CEF-4CD7-BE12-D8F6D89D2BE3}' with user privileges. > >> DisableMsi > >> > > > policy is set to or defaulted to 1. This is the client and the > user > >> does > >> > > > not have full admin token. Evaulation is delayed until after > >> credentials > >> > > > provided. This install could still be blocked > >> > > > ... > >> > > > MSI (s) (D8:88) [19:24:24:247]: MSI_LUA: Credential Request return > >> = 0x0 > >> > > > MSI (s) (D8:88) [19:24:24:247]: MSI_LUA: Elevated credential > consent > >> > > > provided. Install will run elevated > >> > > > ... > >> > > > MSI (s) (D8:88) [19:24:24:247]: Note: 1: 2262 2: AdminProperties > 3: > >> > > > -2147287038 > >> > > > MSI (s) (D8:88) [19:24:24:247]: Machine policy value > >> > > > 'AlwaysInstallElevated' is 0 > >> > > > MSI (s) (D8:88) [19:24:24:247]: User policy value > >> 'AlwaysInstallElevated' > >> > > > is 0 > >> > > > MSI (s) (D8:88) [19:24:24:247]: Product installation will be > >> elevated > >> > > > because user provided elevated credentials and product is being > >> installed > >> > > > per-machine. > >> > > > MSI (s) (D8:88) [19:24:24:247]: Running product > >> > > > '{BACFF966-3CEF-4CD7-BE12-D8F6D89D2BE3}' with elevated privileges: > >> > > Product > >> > > > is assigned. > >> > > > ... > >> > > > MSI (s) (D8:88) [19:24:24:310]: MSI_LUA: Setting AdminUser > property > >> to 1 > >> > > > because this is the client or the user has already permitted > >> elevation > >> > > > MSI (s) (D8:88) [19:24:24:310]: PROPERTY CHANGE: Adding AdminUser > >> > > property. > >> > > > Its value is '1'. > >> > > > MSI (s) (D8:88) [19:24:24:310]: MSI_LUA: Setting > MsiRunningElevated > >> > > > property to 1 because the install is already running elevated. > >> > > > MSI (s) (D8:88) [19:24:24:310]: PROPERTY CHANGE: Adding > >> > > MsiRunningElevated > >> > > > property. Its value is '1'. > >> > > > MSI (s) (D8:88) [19:24:24:310]: PROPERTY CHANGE: Adding Privileged > >> > > > property. Its value is '1'. > >> > > > ... > >> > > > Action 19:24:25: CustomInstall. > >> > > > MSI (s) (D8:88) [19:24:25:261]: Executing op: > >> > > > > >> > > > >> > CustomActionSchedule(Action=CustomInstall,ActionType=1025,Source=BinaryData,Target=Install,CustomActionData=CERTPROPERTY=*. > >> > > > mydomain.net;) > >> > > > MSI (s) (D8:88) [19:24:25:261]: Creating MSIHANDLE (51) of type > >> 790536 > >> > > for > >> > > > thread 4488 > >> > > > MSI (s) (D8:E8) [19:24:25:261]: Invoking remote custom action. > DLL: > >> > > > C:\Windows\Installer\MSIBD8F.tmp, Entrypoint: Install > >> > > > MSI (s) (D8!F4) [19:24:25:277]: Creating MSIHANDLE (52) of type > >> 790531 > >> > > for > >> > > > thread 1268 > >> > > > SFXCA: Extracting custom action to temporary directory: > >> > > > C:\Users\SomeUser\AppData\Local\Temp\MSIBD8F.tmp-\ > >> > > > MSI (s) (D8!F4) [19:24:25:277]: Closing MSIHANDLE (52) of type > >> 790531 for > >> > > > thread 1268 > >> > > > MSI (s) (D8!F4) [19:24:25:308]: Creating MSIHANDLE (53) of type > >> 790531 > >> > > for > >> > > > thread 1268 > >> > > > SFXCA: Binding to CLR version v4.0.30319 > >> > > > ... > >> > > > 19:24:25.464--MSI.Install -- Exception > >> > > System.ComponentModel.Win32Exception > >> > > > (0x80004005): Binding failed, see log file for details > >> > > > ... > >> > > > > >> > > > > >> > > > > >> > > > -- > >> > > > Tony > >> > > > > >> > > > >> > ------------------------------------------------------------------------------ > >> > > > Rapidly troubleshoot problems before they affect your business. > >> Most IT > >> > > > organizations don't have a clear picture of how application > >> performance > >> > > > affects their revenue. With AppDynamics, you get 100% visibility > >> into > >> > > your > >> > > > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of > >> > > AppDynamics Pro! > >> > > > > >> > > > >> > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > >> > > > _______________________________________________ > >> > > > WiX-users mailing list > >> > > > WiX-users@lists.sourceforge.net > >> > > > https://lists.sourceforge.net/lists/listinfo/wix-users > >> > > > >> > > > >> > > > >> > ------------------------------------------------------------------------------ > >> > > Rapidly troubleshoot problems before they affect your business. Most > >> IT > >> > > organizations don't have a clear picture of how application > >> performance > >> > > affects their revenue. With AppDynamics, you get 100% visibility > into > >> your > >> > > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of > >> AppDynamics > >> > > Pro! > >> > > > >> > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > >> > > _______________________________________________ > >> > > WiX-users mailing list > >> > > WiX-users@lists.sourceforge.net > >> > > https://lists.sourceforge.net/lists/listinfo/wix-users > >> > > > >> > > >> > > >> > > >> > -- > >> > Tony > >> > > >> > ------------------------------------------------------------------------------ > >> > Rapidly troubleshoot problems before they affect your business. Most > IT > >> > organizations don't have a clear picture of how application > performance > >> > affects their revenue. With AppDynamics, you get 100% visibility into > >> your > >> > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of > >> AppDynamics Pro! > >> > > >> > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > >> > _______________________________________________ > >> > WiX-users mailing list > >> > WiX-users@lists.sourceforge.net > >> > https://lists.sourceforge.net/lists/listinfo/wix-users > >> > >> > >> > ------------------------------------------------------------------------------ > >> Rapidly troubleshoot problems before they affect your business. Most IT > >> organizations don't have a clear picture of how application performance > >> affects their revenue. With AppDynamics, you get 100% visibility into > your > >> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of > AppDynamics > >> Pro! > >> > >> > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > >> _______________________________________________ > >> WiX-users mailing list > >> WiX-users@lists.sourceforge.net > >> https://lists.sourceforge.net/lists/listinfo/wix-users > >> > > > > > > > > -- > > Tony > > > > > > -- > Tony > > ------------------------------------------------------------------------------ > Rapidly troubleshoot problems before they affect your business. Most IT > organizations don't have a clear picture of how application performance > affects their revenue. With AppDynamics, you get 100% visibility into your > Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics > Pro! > http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
